← Back to CVE search

CVE-2026-43936

e107

Description

e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from -Image/File URL:- of -From a remote location- in -Media Manager- on the administrator screen. This vulnerability is fixed in 2.3.4.

CVSS 4.3EPSS 0.193%Risk 0.44
View source
Published
2026-05-26 16:16:25
Affected versions
<2.3.4
Type
Installed app
Last modified
2026-07-24 11:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N